Module 1 Seat-Time Justification
Module 1: Forensic Foundations
Establish the foundational concepts, terminology, and forensic mindset required for all subsequent digital forensic investigations.
Total Seat Time
1.5 Hours
Target Learner
Beginner Students
Delivery Format
Asynchronous Online Learning
Module Overview
This introductory module establishes the conceptual foundation of the course. Students will learn the forensic mindset, evidence integrity principles, chain of custody procedures, investigation context, legal authorization, and the differences between standard operating system output and forensic tool output.
Learning Activities & Seat Time Summary
| Activity | Estimated Time |
|---|---|
| Video Instruction | 22 Minutes |
| Technical Reading | 48 Minutes |
| Hands-On Lab | Not Assigned |
| Module Quiz | 20 Minutes |
Estimation Method
Video instruction is based on actual recorded runtime for the Module 1 instructional videos. The Module 1 videos total 21 minutes and 17 seconds, which is documented as 22 minutes for seat-time planning.
Technical reading is estimated using a beginner technical-training pace rather than a casual reading pace. The module reading introduces foundational forensic concepts, including the forensic mindset, evidence integrity, chain of custody, investigation types, legal authorization, the Maresware philosophy, and the difference between standard operating system output and forensic tool output. The 48-minute estimate assumes students are reading for comprehension and may pause to interpret terminology, examples, and conceptual distinctions before moving into later practical modules.
Module quiz is estimated at 20 minutes based on 10 open-book questions at 2 minutes per question. Hands-on lab is not assigned for Module 1. This module serves as the course foundation and orientation to the forensic process rather than a full practical lab module.
Module-Specific Justification
Module 1 is designed as the conceptual foundation for the course. Students are introduced to the forensic mindset, evidence integrity, chain of custody, investigation context, authorization, tool philosophy, and the basic distinction between standard and forensic file-system review. Because this module establishes vocabulary and workflow expectations for the rest of the course, the primary learner work consists of watching the recorded instruction, reading the technical module text carefully, and completing the open-book quiz.
The shorter module time is appropriate because no standalone hands-on lab is assigned in Module 1. Practical lab work begins in Module 2 and continues through Modules 2-12, with a larger final practical activity included as part of the course assessment structure.